Patch-ID# 103717-01 Keywords: security convert sdtcm calendar file overwrite Synopsis: CDE 1.0.2: sdtcm_convert has a security hole Date: Sep/04/96 Solaris Release: 2.4_x86, 2.5_x86 SunOS Release: 5.4_x86, 5.5_x86 Unbundled Product: CDE Unbundled Release: 1.0.2 Xref: This patch available on CDE 1.0.1 as patch 103718 Relevant Architectures: i386 BugId's fixed with this patch: 1250240 Changes incorporated in this version: Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/dt/bin/sdtcm_convert Problem Description: 1250240 sdtcm_convert can be used to overwrite files. Patch Installation Instructions: -------------------------------- Refer to the Install.info file for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below as special instructions. Special Install Instructions: ----------------------------- None.